--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-29T17:32:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-29T17:32:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: multus-daemon operation: Update time: "2026-05-29T17:32:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: ovnkube-identity operation: Update subresource: approval time: "2026-05-29T17:32:23Z" name: csr-rw5zs resourceVersion: "6324" uid: c8ec63d3-6cca-4f11-bbe2-df8a9b95999a spec: expirationSeconds: 86400 extra: authentication.kubernetes.io/credential-id: - X509SHA256=0f179a9cc6a2dcb835eeeb894df3a7929ade7354d1d792d4ede2f3e294f35f57 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client usages: - digital signature - client auth username: system:node:ip-10-0-137-123.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-29T17:32:23Z" lastUpdateTime: "2026-05-29T17:32:23Z" message: Auto-approved CSR "csr-rw5zs" reason: AutoApproved status: "True" type: Approved